Cloud Services

ModernOps configuration

GCP Cloud account
Published On Jul 23, 2024 - 8:58 AM

GCP Cloud account

Learn how to onboard a new Google Cloud Platform (GCP) account.
This Kyndryl Modern Operations Applications feature allows you to manage your Google Cloud Platform (GCP) connections to applications. By adding this supported cloud provider, your credentials are securely stored in an internal encrypted vault. Moreover, you can integrate an external vault of your choice, if needed.

GCP Master account

To add a new GCP
Master Account
, from the Kyndryl Modern Operations Applications dashboard click the Main menu on the left side, select
Admin
 and click
Provider Account
; you will be redirected to the Account Management page, and to the
Master Accounts
 tab.
Click
New Master Account
 on the right side. Once in the New Master Account page, click
GCP
.
Add a GCP Master account required for billing
:
  • Account Details
    • Name
      : Enter the Account Name of your choice.
    • Description
      : Enter the description for this account.
    • Project Name
      : Enter the name of the project.
    • Project ID
      : Enter the GCP project ID. Click for more details on
      GCP projects
      .
    • Service Account Number
      : Enter the GCP service account number.
    • Bucket
      : Enter the bucket name where the GCP billing export is configured.
    • Billing Report Prefix
      : Enter the prefix used while configuration of billing export to Bucket. Click Here for more details on
      GCP Buckets
      .
    • Billing Account Number
      : Enter the GCP billing account number associated to the GCP project. Click Here for more details on
      GCP Projects
      .
    Status must remain active, unless you want to exclude this account from ingestion.
Click
Create Account
 and a
“Success: Account Name has been successfully created. You may add credentials”
 alert is displayed. Then scroll down and click
Add Credential
 at the right side of the page.
Connect GCP credentials for data ingestion
:
  • Add Credentials
    • Name
      : Enter the credential name.
    • Purpose
      : Select the purpose.
      • Cost Ingestion (For
        CAM
        )
      • Provisioning (For
        Enterprise Marketplace
        )
    • Description
      : Enter the description for this credential.
    • Delegated Access
      : Enter the ARN.
    • External ID
      : Enter the external ID.
    Status must remain active.
  • Connect to GCP
    • Credential Reference ID
      : Enter the Credential Reference ID
or
  • Click
    Create New or Update Credential Vault
     checkbox.
    • Data Set
      : Enter the billing data set.
    • Service Key
      : Enter the JSON key.
Example:
{
"type": "service_account",
"project_id": "cost-asset-analytics",
"private_key_id": "<key>",
"private_key": "<key>",
"client_email": "<email>",
"client_id": "<id>",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://accounts.google.com/o/oauth2/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/392394086263-compute%40developer.gserviceaccount.com"
}
The above JSON is an example and should be in base 64 and inserted in the service key section.
  • Additional Info
    : Enter any additional info that is required.
  • Click
    Test Connection
     to test whether the credentials are valid.
  • Associate this credential with a business entity
    : Choose the appropriate business entity.
  • Click
    Save
     and a
    “Success: Credential has been successfully added”
     message is displayed.
Click
Add
 and a
“Success: Credential has been successfully added”
 alert is displayed.

GCP Asset account

To add a new GCP
Asset Account
, from the Kyndryl Modern Operations Applications dashboard click the Main menu on the left side, select
Admin
 and click
Provider Account
; you will be redirected to the Account Management page, and to the
Master Account
 tab.
Click the
Asset Accounts
 tab and then click
New Asset Account
. Once in the New Asset Account page, click
GCP
.
Add a GCP Asset account required to provision resources
:
  • Account Details
    • Name
      : Enter the asset account name of your choice.
    • Description
      : Enter the description for the account.
    • Project Name
      : Enter the GCP project name.
    • Project ID
      : Enter the GCP project ID.
    • Service Account Name
      : Enter the GCP service account name.
    • Bucket
      : Enter the bucket name where GCP billing export is configured.
    • Usage Report Prefix
      : Enter the prefix used while configuration of usage export to Bucket.
    • Select Existing Master Account
      : Enter the Master Account to be associated with the Asset Account.
Status must be set to Active
Click
Create Account
 and a
“Success: Account Name has been successfully created. You may add credentials or link asset accounts”
 alert is displayed. Then scroll down and click
Add Credential
 at the right side of the page.
Connect GCP credentials
:
  • Add Credential
    • Name
      : Enter the credential name.
    • Purpose
      : Select the purpose.
      • Asset Ingestion (For
        CAM
        )
      • Provisioning (For
        Enterprise Marketplace
        )
    • Description
      : Enter the description for this credential.
    Status must remain active.
  • Connect to GCP
    • Credential Reference ID
      : Enter the Credential Reference ID.
or
  • Click
    Create New or Update Credential in Vault
     checkbox.
    • Service Key
      : Enter the JSON key.
    • Additional Info
      : Enter any additional info that is required.
  • Click
    Test Connection
     to test whether the credentials are valid.
  • Associate this credential with a business entity
    : Choose the appropriate business entity.
Click
Add
 and a
“Success: Credential has been successfully added”
 alert is displayed.
Do you have two minutes for a quick survey?
Take Survey